ASVS Requirement 13.3.3

• Level: 3
• Chapter: V13 Configuration
• Section: V13.3 Secret Management
• Source: 0x22-V13-Configuration.md

Description

Verify that all cryptographic operations are performed using an isolated security module (such as a vault or hardware security module) to securely manage and protect key material from exposure outside of the security module.